In the name of Allah, the Most Gracious, Most Merciful.

Encryption Recovery Help
=========================
If you are unable to access your encrypted data, use this readme to help resolve the issue.

How to Find BitLocker Recovery Keys
------------------------------------
Recovery keys for Windows 10 devices with "BitLocker Drive Encyrption" or hardware-specefic "Device Encryption" may be accessed from the cloud if you signed in to the device with your Microsoft Account. Go to the devices portal of your Microsoft account. For additional help on this, visit Microsoft Help & Support website.

NOTE: BitLocker Recovery Keys ARE NOT the same as a decryption password. Decryption passwords are used on some devices but not all. Recovery keys, on the other hand, are used for EVERY DEVICE using encryption, regardless of whether a decryption key is required. See "Methods of Encryption" below for more info.

Tip: Write down recovery keys for your devices and/or save them to a password manager.

Forgot BitLoker Decryption Password
-------------------------------------
If you forget your decryption password and BitLocker is currently enabled on your PC, your files are encrypted cannot be read until you enter the correct password. You have several options.

For help with recovering lost or forgotten passwords, including BitLocker decryption keys in the "Account Recovery" guide, which you can, Insha'Allah, get from this URL: bit.ly/3li3Q56. You can find all of them discussed there

**The guide is geared toward users of "Enpass Password Manager" on PC and mobile, but it covers other ways to recover data, and some of the information relating to Enpass may also be applicable to other password managers.

Methods of Encryption
======================
Depending on your device, your data is either encrypted with a password or on the chip.

Modern devices use either TPM or "Device Encryption". Newer devices, especially higher-end PCs and tablets often have TPM modules. Hardware-specefic "Device Encryption" can often be found on tablets and premium laptops. These devices encrypt your data without requiring a decryption password because the encryption happen in the chip instead.

TPM modules allow you to enable BitLocker without requiring a decryption password. "Device Encyrption" is specefic to your hardware and come pre-configured from factory. You can enable or disable it from the Windows 10 Settings app.

Some devices, especially older hardware and consumer desktop and laptop PCs will require you to set up a decryption password when you turn on BitLocker. You may, then, be required to enter a decryption password that you created when you set up BitLocker everytime you boot the device.


Using BitLocker
=================

For Devices that use BitLocker Drive Encryption
-------------------------------------------------
Manage encryption settings from the classic Control Panel.

Note: Windows cumulative updates and other patches that require restart WILL REQUIRE user to enter decryption password each time the device restarts. DOES NOT APPLY TO FEATURE UPDATES* (See below).

Tip: suspend BitLocker from the control panel to enable the PC to restart without requiring passwords (useful for unattended cumulative updates). BitLocker resumes after the restart. It must be manually suspended again from the control panel each time you want to restart without requiring the password.

*Windows automatically suspends BitLocker during a feature updates (i.e. "build" upgrades) and does not require decryption password for any of its restarts.

PCs that don't come pre-configured from factory to support "Device Encryption" MUST use standard BitLocker, as described above.


For Devices that use BitLocker Drive Encryption
-------------------------------------------------
Turn encryption on or off from Settings app.

Note: These devices are not compatible with standard Windows BitLocker encryption. Verify this with the manufacturer's support resources. See Microsoft Docs for additional information on BitLocker and Device Encryption.
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